jrtechs-Panda-Quotes/user/newUser.php

<?php

if($admin)
{
    $errors = array();

    if(isset($_POST['newUser']))
    {
        $i_first = mysqli_real_escape_string($dbc, trim($_POST['first']));
        $i_last = mysqli_real_escape_string($dbc, trim($_POST['last']));
        $i_pass = mysqli_real_escape_string($dbc, trim($_POST['pass']));
        $i_user = mysqli_real_escape_string($dbc, trim($_POST['user_name']));

        if($i_first && $i_last && $i_pass && $i_user)
        {
            $q = "select user_id from users where user_name='$i_user'";
            $r = mysqli_query($dbc, $q);

            if(@mysqli_num_rows($r) == 1)
            {
                $errors['name'] = "That user name is already in use.";
            }
        }
        else
        {
            $errors['input'] = "Please fill in all fields!";
        }

        if(empty($errors))
        {
            $passcom = $i_pass . $i_first;
            $passcom = SHA1($passcom);

            if(isset($_POST['admin']))
            {
                $adminn = "true";
            }
            else
            {
                $adminn = "false";
            }

            $q = "insert into users(first_name, last_name, user_name, 
pass, registration_date, admin) values ('$i_first', '$i_last' , '$i_user', 
'$passcom', now(), $adminn)";
            //echo $q;
            $r = mysqli_query($dbc, $q);

            header("Location: admin.php");

        }
    }

    echo '<h1 class="w3-text-teal"><center>Add User</center></h1>';

    echo '<form action="admin.php" method ="post" class="w3-container 
w3-card-4">
        
        <div class="w3-group">
            <input class="w3-input" type="text" name="user_name" required>
            <label class="w3-label w3-validate">User Name</label>
        </div>
        <div class="w3-group">
            <input class="w3-input" type="text" name="first" required>
            <label class="w3-label w3-validate">First Name</label>
        </div>
        <div class="w3-group">
            <input class="w3-input" type="text" name="last" required>
            <label class="w3-label w3-validate">Last Name</label>
        </div>
        <div class="w3-group">
            <input class="w3-input" type="password" name="pass" 
            maxlength="20" required>
            <label class="w3-label w3-validate">Password</label>
        </div>
        
        <input class="w3-check" type="checkbox" name="admin">
        <label class="w3-validate">Admin<label>
        

        <p><input type="submit" name="Submit" value="Add User" 
        class="w3-padding-16 w3-hover-dark-grey w3-btn-block w3-center-align" /></p>
        <input type="hidden" name="newUser" value="TRUE" />
        
    
    </form>';

    foreach($errors as $msg)
        echo " - $msg<br />";
}